[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. 2021/05/04 01:29:12 fuzzer started 2021/05/04 01:29:12 dialing manager at 10.128.0.169:34381 2021/05/04 01:29:12 syscalls: 3586 2021/05/04 01:29:12 code coverage: enabled 2021/05/04 01:29:12 comparison tracing: enabled 2021/05/04 01:29:12 extra coverage: enabled 2021/05/04 01:29:12 setuid sandbox: enabled 2021/05/04 01:29:12 namespace sandbox: enabled 2021/05/04 01:29:12 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/04 01:29:12 fault injection: enabled 2021/05/04 01:29:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/04 01:29:12 net packet injection: enabled 2021/05/04 01:29:12 net device setup: enabled 2021/05/04 01:29:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/04 01:29:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/04 01:29:12 USB emulation: enabled 2021/05/04 01:29:12 hci packet injection: enabled 2021/05/04 01:29:12 wifi device emulation: enabled 2021/05/04 01:29:12 802.15.4 emulation: enabled 2021/05/04 01:29:12 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/04 01:29:13 fetching corpus: 50, signal 48842/52518 (executing program) 2021/05/04 01:29:13 fetching corpus: 100, signal 89397/94566 (executing program) 2021/05/04 01:29:13 fetching corpus: 150, signal 107270/113925 (executing program) 2021/05/04 01:29:13 fetching corpus: 200, signal 125602/133636 (executing program) syzkaller login: [ 74.972744][ T8436] general protection fault, probably for non-canonical address 0xdffffc0000000d8e: 0000 [#1] PREEMPT SMP KASAN [ 74.984547][ T8436] KASAN: probably user-memory-access in range [0x0000000000006c70-0x0000000000006c77] [ 74.994086][ T8436] CPU: 0 PID: 8436 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 75.003628][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.013774][ T8436] RIP: 0010:pfifo_fast_dequeue+0x355/0xb30 [ 75.019606][ T8436] Code: df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 10 07 00 00 4d 8d 6c 24 28 8b 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 e5 20 83 c0 03 38 d0 7c 08 84 d2 [ 75.039650][ T8436] RSP: 0018:ffffc9000166f1d8 EFLAGS: 00010207 [ 75.045800][ T8436] RAX: dffffc0000000000 RBX: ffff888016325000 RCX: 0000000000000002 [ 75.053770][ T8436] RDX: 0000000000000d8e RSI: ffffffff87258b64 RDI: ffff888016325010 [ 75.061773][ T8436] RBP: 0000000000000174 R08: 0000000000000002 R09: 0000000000000000 [ 75.069915][ T8436] R10: ffffffff87258b56 R11: 0000000000000000 R12: 0000000000006c4e [ 75.078211][ T8436] R13: 0000000000006c76 R14: 0000000000000002 R15: 00000000000003e8 [ 75.086192][ T8436] FS: 000000c0001e4c90(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 75.095134][ T8436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.101732][ T8436] CR2: 00007ff539f06710 CR3: 0000000024a7f000 CR4: 00000000001506f0 [ 75.109804][ T8436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.117787][ T8436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.125761][ T8436] Call Trace: [ 75.129054][ T8436] __qdisc_run+0x1ae/0x15f0 [ 75.133558][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.139816][ T8436] __dev_queue_xmit+0x1390/0x2e50 [ 75.145550][ T8436] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 75.150839][ T8436] ? __ip_finish_output+0x396/0x640 [ 75.156060][ T8436] ? mark_held_locks+0x9f/0xe0 [ 75.160835][ T8436] ? ip_finish_output2+0x15ac/0x2220 [ 75.166117][ T8436] ip_finish_output2+0xef0/0x2220 [ 75.171138][ T8436] ? ip_fragment.constprop.0+0x240/0x240 [ 75.177023][ T8436] ? __ip_finish_output+0x640/0x640 [ 75.182222][ T8436] __ip_finish_output+0x396/0x640 [ 75.187245][ T8436] ip_finish_output+0x35/0x200 [ 75.192014][ T8436] ip_output+0x196/0x310 [ 75.196283][ T8436] __ip_queue_xmit+0x8d3/0x1a30 [ 75.201139][ T8436] __tcp_transmit_skb+0x1889/0x38f0 [ 75.206359][ T8436] ? __tcp_select_window+0xad0/0xad0 [ 75.211657][ T8436] ? find_held_lock+0x2d/0x110 [ 75.216441][ T8436] ? __build_skb_around+0x23e/0x2f0 [ 75.221639][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.228136][ T8436] ? __alloc_skb+0x17c/0x340 [ 75.232779][ T8436] __tcp_send_ack.part.0+0x3d6/0x7a0 [ 75.238072][ T8436] tcp_send_ack+0x7d/0xa0 [ 75.242404][ T8436] tcp_cleanup_rbuf+0x46c/0x5b0 [ 75.247258][ T8436] tcp_recvmsg_locked+0x7aa/0x22f0 [ 75.252401][ T8436] ? tcp_splice_read+0x8b0/0x8b0 [ 75.257359][ T8436] ? mark_held_locks+0x9f/0xe0 [ 75.262145][ T8436] ? __local_bh_enable_ip+0xa0/0x120 [ 75.267882][ T8436] tcp_recvmsg+0x134/0x550 [ 75.272362][ T8436] ? tcp_recvmsg_locked+0x22f0/0x22f0 [ 75.277749][ T8436] ? aa_sk_perm+0x311/0xab0 [ 75.282261][ T8436] inet_recvmsg+0x11b/0x5e0 [ 75.286767][ T8436] ? inet_sendpage+0x140/0x140 [ 75.291549][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.297795][ T8436] ? security_socket_recvmsg+0x8f/0xc0 [ 75.303276][ T8436] sock_read_iter+0x33c/0x470 [ 75.308157][ T8436] ? ____sys_recvmsg+0x600/0x600 [ 75.313106][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.319346][ T8436] ? fsnotify+0xa58/0x1060 [ 75.323760][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.330080][ T8436] new_sync_read+0x5b7/0x6e0 [ 75.334706][ T8436] ? ksys_lseek+0x1b0/0x1b0 [ 75.339213][ T8436] vfs_read+0x35c/0x570 [ 75.343366][ T8436] ksys_read+0x1ee/0x250 [ 75.347608][ T8436] ? vfs_write+0xa40/0xa40 [ 75.352054][ T8436] ? syscall_enter_from_user_mode+0x27/0x70 [ 75.357957][ T8436] do_syscall_64+0x3a/0xb0 [ 75.362387][ T8436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.368295][ T8436] RIP: 0033:0x4af19b [ 75.372194][ T8436] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 75.391798][ T8436] RSP: 002b:000000c000077828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 75.400221][ T8436] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af19b [ 75.408205][ T8436] RDX: 0000000000001000 RSI: 000000c000294000 RDI: 0000000000000006 [ 75.416200][ T8436] RBP: 000000c000077878 R08: 0000000000000001 R09: 0000000000000002 [ 75.424171][ T8436] R10: 00000000000078b1 R11: 0000000000000212 R12: 00000000000078ad [ 75.432158][ T8436] R13: 0000000000000400 R14: 0000000000000004 R15: 0000000000000004 [ 75.440150][ T8436] Modules linked in: [ 75.444246][ T8436] ---[ end trace 0413819c5cd68f91 ]--- [ 75.449757][ T8436] RIP: 0010:pfifo_fast_dequeue+0x355/0xb30 [ 75.455630][ T8436] Code: df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 10 07 00 00 4d 8d 6c 24 28 8b 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 e5 20 83 c0 03 38 d0 7c 08 84 d2 [ 75.475341][ T8436] RSP: 0018:ffffc9000166f1d8 EFLAGS: 00010207 [ 75.481527][ T8436] RAX: dffffc0000000000 RBX: ffff888016325000 RCX: 0000000000000002 [ 75.489574][ T8436] RDX: 0000000000000d8e RSI: ffffffff87258b64 RDI: ffff888016325010 [ 75.497589][ T8436] RBP: 0000000000000174 R08: 0000000000000002 R09: 0000000000000000 [ 75.505739][ T8436] R10: ffffffff87258b56 R11: 0000000000000000 R12: 0000000000006c4e [ 75.513931][ T8436] R13: 0000000000006c76 R14: 0000000000000002 R15: 00000000000003e8 [ 75.522177][ T8436] FS: 000000c0001e4c90(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 75.531977][ T8436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.538711][ T8436] CR2: 00007ff539f06710 CR3: 0000000024a7f000 CR4: 00000000001506f0 [ 75.546745][ T8436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.554800][ T8436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.563011][ T8436] Kernel panic - not syncing: Fatal exception in interrupt [ 75.570962][ T8436] Kernel Offset: disabled [ 75.575302][ T8436] Rebooting in 86400 seconds..